In the Claims 

1 . (Currently amended) A visual display unit which displays a graphical user interface for 
representing and facilitating user manipulation of persistent yet revocable access control settings for a 
specific predetermined resource visual digital document comprising: 

one or more display regions on the display unit for graphical representations of all persistent yet 
revocable access control settings for the resource specific predetermined visual digital 
document , wherein the graphical representations result from transformations applied to the 
structured data which defines the access control settings for the resource document ; and 

one or more a display region[[s]] on the display unit for normal size, legibly scaled, unabridged 
representation of the content of the resource document ; 

wherein the set of display regions for representations of the access control settings and the 
display region for representation of the content of the resource document are concurrently 
visible, are concurrently operable, and appear to the operator as in an integrated graphical user 
interface ; and wherein the resource i3 a digital document . 

2. (Previously presented) The visual display unit of claim 1, wherein one or more functions modify 
the spatial layout of the display regions for representations of the access control settings. 

3. (Previously presented) The visual display unit of claim 1 , wherein one or more functions modify 
the number of the display regions for representations of the access control settings. 

4. (Previously presented) The visual display unit of claim 1, wherein one or more functions modify 
the transformations that are applied to the structured data. 

5. (Previously presented) The visual display unit of claim 1, wherein a user is graphically represented 
by a display element comprising, at least in part, a likeness of the user. 

6. (Previously presented) The visual display unit of claim 5, wherein the likeness comprises, at least in 
part, a digital photograph, processed by a method including at least one step selected from the set of: 
adjusting image color saturation toward a predetermined target saturation level; converting to 
grayscale; adjusting image brightness toward a predetermined target brightness level; adjusting image 
contrast toward a predetermined target contrast level; adjusting image sharpness toward a 
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predetermined target sharpness level; and masking with a shape selected from a set comprising ovals 
and outlines of a bust. 

7. (Currently amended) The visual display unit of claim 1, wherein the set of display regions further 
comprises[[:]] a display region for a graphical representation of the set of groups, uscr3 and roles 
defined by existing structured data for the resource and their respective access privileges; and a display 
region for a graphical representation of the result of transforming the set of groups, users and roles and 
their respective access privileges into a corresponding set of individual users and their respective 
effective access privileges. 

8. (Currently amended) The visual display unit of claim I, further comprising a first display region for 
a graphical representation of at least one set of known users and groups, wherein the operator can 
designate indicia for known users and groups and visually associate the designated indicia with a 
second display region to change the structured data which defines the access control settings for the 
resource document . 

9. (Previously presented) The visual display unit of claim 8, wherein the first display region is reduced 
in size until activated by the user, and the first display region is increased in size upon activation. 

10. (Canceled) 

1 1 . (Currently amended) The visual display unit of claim 40 45, wherein the set of individual users 
consists of: the set of users who have any access privilege at all for the document ; and the set 
of users who have accessed the resource document in the past although they currently are without any 
access privilege for the resource document . 

12. -27. (Canceled) 

28. (Currently amended) The visual display unit of claim 40 45, wherein graphical representations of 
users are sorted by one or more of the following attributes: 

the time of the most recent access by the user; 

the time of the most recent write access by the user; and 

current privileges the user has for the resource document . 

29. (Currently amended) The visual display unit of claim 40 45, wherein a user is graphically 
represented by a display element comprising, at least in part, a likeness of the user. 
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30. (Currently amended) The visual display unit of claim -1-2- 46, wherein the set of individual users 
consists of: the set of users who have any access privilege at all for the resource document ; and the set 
of users who have accessed the resource document in the past although they currently are without any 
access privilege for the resource document . 

3 1 . (Currently amended) The visual display unit of claim 42- 46, wherein graphical representations of 
users are sorted by one or more of the following attributes: 

the time of the most recent access by the user; 

the time of the most recent write access by the user; and 

current privileges the user has for the resource document . 

32. (Currently amended) The visual display unit of claim 42- 46, wherein a user is graphically 
represented by a display element comprising, at least in part, a likeness of the user. 

33. (Currently amended) The visual display unit of claim 8, wherein the set further comprises access 
control settings macros and the operator can designate indicia for macros and visually associate the 
designated indicia with the second display region to change the structured data which defines the 
access control settings for the resource document . 

34. (Previously presented) The visual display unit of claim 33, wherein a user is graphically 
represented by a display element comprising, at least in part, a likeness of the user. 

35. (Canceled) 

36. (Previously presented) The visual display unit of claim 7, wherein a user is graphically 
represented by a display element comprising, at least in part, a likeness of the user. 

37. (Canceled) 

38. (Previously presented) The visual display unit of claim 8, wherein a user is graphically 
represented by a display element comprising, at least in part, a likeness of the user. 

39. (Canceled) 

40. (Previously presented) The visual display unit of claim 30, wherein a user is graphically 
represented by a display element comprising, at least in part, a likeness of the user. 
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41 . (Previously presented) The visual display unit of claim 40, wherein the likeness comprises, at least 
in part, a digital photograph, processed by a method including at least one step selected from the set of: 
adjusting image color saturation toward a predetermined target saturation level; converting to 
grayscale; adjusting image brightness toward a predetermined target brightness level; adjusting image 
contrast toward a predetermined target contrast level; adjusting image sharpness toward a 
predetermined target sharpness level; and masking with a shape selected from a set comprising ovals 
and outlines of a bust. 

42. (Previously presented) The visual display unit of claim 3 1 , wherein a user is graphically 
represented by a display element comprising, at least in part, a likeness of the user. 

43. (Previously presented) The visual display unit of claim 38, wherein the first display region is 
reduced in size until activated by the user, and the first display region is increased in size upon 
activation. 

44. (New) The visual display unit of claim 7, wherein the set of display regions comprises a display 
region for a graphical representation of the set of groups, users and roles defined by existing structured 
data for the document and their respective access privileges. 

45. (New) A visual display unit which displays a graphical user interface for representing access log 
information and access control settings for a single specific predetermined digital document 
comprising: 

a display region on the display unit containing a graphical representation of a set comprising a 
plurality of individual users wherein each of the individual users is graphically represented 
essentially at most one time by a visual element which comprises: 

a representation of the identity of the individual user; 

a differing visual element for indicating if the user for the single specific predetermined digital 
document has privilege different than having read privilege; 

indication whether there has been any access at all by the user to the document; and 
one or more of the following visual elements: 

representation of the time of the most recent read access by the user to the document; 
representation of the time of the most recent write access by the user to the document; 
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indication whether the most recent write access by the user to the document is the most recent 
write access by any user to the document; 

indication whether the most recent read access by the user to the document has been before or 
since the most recent write access by any user to the document. 

46. (New) A visual display unit which displays a graphical user interface for representing content, 
access log information, and access control settings for a specific predetermined visual digital document 
comprising: 

a display region on the display unit for normal size, legibly scaled, unabridged representation of 
the content of the specific predetermined visual digital document; and 

a display region containing a graphical representation of a set comprising a plurality of 
individual users wherein each of the individual users is graphically represented essentially at 
most one time by a visual element which comprises: 

a representation of the identity of the individual user; 

a differing visual element for indicating if the user for the document has privilege different than 
having read privilege; 

indication whether there has been any access at all by the user to the document; and 
one or more of the following visual elements: 

representation of the time of the most recent read access by the user to the document; 

representation of the time of the most recent write access by the user to the document; 

indication whether the most recent write access by the user to the document is the most recent 
write access by any user to the document; 

indication whether the most recent read access by the user to the document has been before or 
since the most recent write access by any user to the document; 

wherein the display region for representation of the set of users and the display region for 
representation of the content of the document appear to the operator as an integrated graphical 
user interface. 



reply 



page 6 of 19 



10/802,658 



47. (New) The visual display unit of claim 46, wherein the display region for representation of the set 
of users and the display region for representation of the content of the document are concurrently 
visible and are concurrently operable. 

48. (New) The visual display unit of claim 47, wherein a user is graphically represented by a display 
element comprising, at least in part, a likeness of the user. 

49. (New) The visual display unit of claim 48, wherein the set of individual users consists of: the set 
of users who have any access privilege at all for the document; and the set of users who have accessed 
the document in the past although they currently are without any access privilege for the document. 

50. (New) The visual display unit of claim 49, wherein graphical representations of users are sorted by 
one or more of the following attributes: 

the time of the most recent access by the user; 

the time of the most recent write access by the user; and 

current privileges the user has for the document. 

5 1 . (New) The visual display unit of claim 40, wherein graphical representations of users are sorted by 
one or more of the following attributes: 

the time of the most recent access by the user; 

the time of the most recent write access by the user; and 

current privileges the user has for the document. 

52. (New) A visual display unit which displays a graphical user interface for representing and 
facilitating user manipulation of persistent yet revocable access control settings for a specific 
predetermined Portable Document Format document comprising: 

one or more display regions on the display unit for graphical representations of all persistent yet 
revocable access control settings for the specific predetermined Portable Document Format 
document, wherein the graphical representations result from transformations applied to the 
structured data which defines the access control settings for the document; and 

a display region on the display unit for normal size, legibly scaled, unabridged representation of 
the content of the document; 
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wherein the set of display regions for representations of the access control settings and the 
display region for representation of the content of the document are concurrently visible, are 
concurrently operable, and appear to the operator as in an integrated graphical user interface. 

53. (New) The visual display unit of claim 52, wherein the set of display regions comprises a display 
region for a graphical representation of the result of transforming the set of groups, users and roles and 
their respective access privileges into a corresponding set of individual users and their respective 
effective access privileges. 

54. (New) The visual display unit of claim 52, wherein a user is graphically represented by a display 
element comprising, at least in part, a likeness of the user. 

55. (New) A visual display unit which displays a graphical user interface for representing access log 
information and access control settings for a single specific Portable Document Format document 
comprising: 

a display region on the display unit containing a graphical representation of a set comprising a 
plurality of individual users wherein each of the individual users is graphically represented 
essentially at most one time by a visual element which comprises: 

a representation of the identity of the individual user; 

a differing visual element for indicating if the user for the single specific predetermined 
Portable Document Format document has privilege different than having read privilege; 

indication whether there has been any access at all by the user to the document; and 

one or more of the following visual elements: 

representation of the time of the most recent read access by the user to the document; 

representation of the time of the most recent write access by the user to the document; 

indication whether the most recent write access by the user to the document is the most recent 
write access by any user to the document; 

indication whether the most recent read access by the user to the document has been before or 
since the most recent write access by any user to the document. 
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56. (New) The visual display unit of claim 55, wherein the set of individual users consists of: the set 
of users who have any access privilege at all for the document; and the set of users who have accessed 
the document in the past although they currently are without any access privilege for the document. 

57. (New) The visual display unit of claim 55, wherein a user is graphically represented by a display 
element comprising, at least in part, a likeness of the user. 

58. (New) A visual display unit which displays a graphical user interface for representing content, 
access log information, and access control settings for a specific predetermined Portable Document 
Format document comprising: 

a display region on the display unit for normal size, legibly scaled, unabridged representation of 
the content of the specific predetermined Portable Document Format document; and 

a display region containing a graphical representation of a set comprising a plurality of 
individual users wherein each of the individual users is graphically represented essentially at 
most one time by a visual element which comprises: 

a representation of the identity of the individual user; 

a differing visual element for indicating if the user for the document has privilege different than 
having read privilege; 

indication whether there has been any access at all by the user to the document; and 
one or more of the following visual elements: 

representation of the time of the most recent read access by the user to the document; 

representation of the time of the most recent write access by the user to the document; 

indication whether the most recent write access by the user to the document is the most recent 
write access by any user to the document; 

indication whether the most recent read access by the user to the document has been before or 
since the most recent write access by any user to the document; 

wherein the display region for representation of the set of users and the display region for 
representation of the content of the document appear to the operator as an integrated graphical 
user interface. 
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59. (New) The visual display unit of claim 58, wherein the set of individual users consists of: the set 
of users who have any access privilege at all for the document; and the set of users who have accessed 
the document in the past although they currently are without any access privilege for the document. 

60. (New) The visual display unit of claim 59, wherein a user is graphically represented by a display 
element comprising, at least in part, a likeness of the user. 

61 . (New) The visual display unit of claim 58, wherein the display region for representation of the set 
of users and the display region for representation of the content of the document are concurrently 
visible and are concurrently operable. 

62. (New) The visual display unit of claim 61, wherein a user is graphically represented by a display 
element comprising, at least in part, a likeness of the user. 

63. (New) A visual display unit which displays a graphical user interface for representing and 
facilitating user manipulation of persistent yet revocable access control settings for a specific 
predetermined visually compound digital text document comprising: 

one or more display regions on the display unit for graphical representations of all persistent yet 
revocable access control settings for the specific predetermined visually compound digital text 
document, wherein the graphical representations result from transformations applied to the 
structured data which defines the access control settings for the document; and 

a display region on the display unit for normal size, legibly scaled, unabridged representation of 
the content of the document; 

wherein the set of display regions for representations of the access control settings and the 
display region for representation of the content of the document are concurrently visible, are 
concurrently operable, and appear to the operator as in an integrated graphical user interface. 

64. (New) The visual display unit of claim 63, wherein the set of display regions comprises a display 
region for a graphical representation of the result of transforming the set of groups, users and roles and 
their respective access privileges into a corresponding set of individual users and their respective 
effective access privileges. 

65. (New) The visual display unit of claim 63, wherein a user is graphically represented by a display 
element comprising, at least in part, a likeness of the user. 
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66. (New) A visual display unit which displays a graphical user interface for representing content, 
access log information, and access control settings for a specific predetermined visually compound 
digital text document comprising: 

a display region on the display unit for normal size, legibly scaled, unabridged representation of 
the content of the specific predetermined visually compound digital text document; and 

a display region containing a graphical representation of a set comprising a plurality of 
individual users wherein each of the individual users is graphically represented essentially at 
most one time by a visual element which comprises: 

a representation of the identity of the individual user; 

a differing visual element for indicating if the user for the document has privilege different than 
having read privilege; 

indication whether there has been any access at all by the user to the document; and 
one or more of the following visual elements: 

representation of the time of the most recent read access by the user to the document; 

representation of the time of the most recent write access by the user to the document; 

indication whether the most recent write access by the user to the document is the most recent 
write access by any user to the document; 

indication whether the most recent read access by the user to the document has been before or 
since the most recent write access by any user to the document; 

wherein the display region for representation of the set of users and the display region for 
representation of the content of the document appear to the operator as an integrated graphical 
user interface. 

67. (New) The visual display unit of claim 66, wherein the set of individual users consists of: the set 
of users who have any access privilege at all for the document; and the set of users who have accessed 
the document in the past although they currently are without any access privilege for the document. 

68. (New) The visual display unit of claim 67, wherein a user is graphically represented by a display 
element comprising, at least in part, a likeness of the user. 
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69. (New) The visual display unit of claim 66, wherein the display region for representation of the set 
of users and the display region for representation of the content of the document are concurrently 
visible and are concurrently operable. 

70. (New) The visual display unit of claim 69, wherein a user is graphically represented by a display 
element comprising, at least in part, a likeness of the user. 
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